#next Next Previous Contents _____________________________________________________________________________________ Linux netfilter Hacking HOWTO Rusty Russell, mailing list netfilter@lists.samba.org v0.0.1, Tue Aug 31 22:12:04 PDT 1999 _____________________________________________________________________________________ This document describes the netfilter architecture for Linux, how to hack it, and some of the major systems which sit on top of it, such as packet filtering, connection tracking and Network Address Translation. _____________________________________________________________________________________ 1. Introduction * 1.1 What is netfilter? * 1.2 What's wrong with what we had in 2.0 and 2.2? * 1.3 Who are you? * 1.4 Why does it crash? 2. Netfilter Architecture * 2.1 Netfilter Base * 2.2 Packet Filtering * 2.3 NAT and Masquerading * 2.4 Reverse NAT (load-sharing), Port Forwarding, and Transparent * 2.5 Connection tracking * 2.6 Other Additions 3. Information for Programmers * 3.1 Understanding iptables * 3.2 Extending iptables * 3.3 Understanding NAT * 3.4 Extending Connection Tracking/NAT * 3.5 Understanding Netfilter * 3.6 Writing New Netfilter Modules 4. Life in userspace * 4.1 Using libiptc * 4.2 Packet Handling in Userspace 5. Translating 2.0 and 2.2 Packet Filter Modules 6. Motivation _____________________________________________________________________________________ Next Previous Contents